#Release Notes

#Integration Requirements

Artifact Hub Shim is installed as an ACP cluster plugin. Tekton resolver and Pipelines as Code integration require a supported Alauda DevOps Pipelines (tektoncd-operator) release.

#Supported Alauda DevOps Pipelines versions

Artifact Hub Shim v1.0.0 is supported out of the box with the already released Alauda DevOps Pipelines v4.14.0. Support on the 4.10, 4.6, and 4.0 product lines becomes available after the following minimum tektoncd-operator patch versions are released:

If you need Artifact Hub Shim v1.0.0 on an earlier tektoncd-operator patch version, contact the Alauda DevOps team.

#Supported ACP versions

Alauda DevOps Pipelines v4.14.x and Artifact Hub Shim v1.0.0 depend on a platform capability that earlier ACP patch versions do not provide. On ACP 4.0 through 4.3 they therefore require a minimum ACP patch version, and support becomes available once that ACP patch version is released:

On ACP 4.4 and later there is no such restriction.

If you need Artifact Hub Shim v1.0.0 with Alauda DevOps Pipelines v4.14.x on an earlier ACP patch version, contact the Alauda DevOps team.

#v1.0.0

Released on August 19, 2026, v1.0.0 is the first generally available release of Artifact Hub Shim.

#Features and Enhancements

Offline Catalog Service

• Provides an Artifact Hub-compatible API for Tekton Task, Pipeline, and StepAction resources without requiring internet access.
• Packages the built-in ACP catalog and its referenced tool images for offline plugin delivery.
• Supports original and normalized semantic versions, latest-version selection, catalog aliases, disabled packages, and source-conflict isolation.

Custom Catalog Sources

• Loads additional catalogs from Git repositories declared through labeled Kubernetes ConfigMap resources.
• Supports HTTPS credentials, SSH credentials, private CA certificates, cross-namespace source discovery, optional sources, and last-valid snapshot behavior when a refresh fails.

Tekton and DevOps Integration

• Serves the Artifact Hub endpoints used by the Tekton hub resolver and Pipelines as Code.
• Serves authenticated Hub-compatible APIs used by the ACP DevOps UI.
• Supports global, project, namespace, and explicit-namespace repository visibility, including local resolver admission checks.

Catalog Extensions

• Synchronizes explicitly labeled extra ConfigMap resources into approved namespaces with ownership, conflict, prune, and keep-policy controls.
• Provides an optional webhook for catalog mail and execution-overview template rendering.

Operations and Security

• Provides health, readiness, and per-source snapshot-status endpoints.
• Supports IPv4, IPv6, dual-stack, restricted Pod Security defaults, and multi-replica API deployment with pod-local storage.
• Integrates UI-compatible endpoints with ACP or Kubernetes request authentication and SubjectAccessReview authorization.

#Fixed Issues

• Before this update, periodic synchronization of Git-backed catalog sources could accumulate zombie processes and eventually cause catalog source refreshes to fail. With this update, Git subprocesses are properly reaped, so catalog source refreshes no longer fail because zombie processes accumulate.
• Before this update, when a Pipeline ran multiple chart-build-push@0.2 Tasks concurrently against a shared source workspace, a chart package could be pushed to the wrong OCI path, causing the chart content in the registry to mismatch the expected chart name. With this update, concurrent TaskRuns push their own chart packages to the correct OCI paths, keeping the stored chart content consistent with the expected chart names.

#Known Issues

No issues in this release.